Yes, but there is multiple ways of doing it depending on how the client authenticates/is accessing the WLAN. As an example, you can assign a User Role (without a Captive Portal) based upon a MAC Address.
IAP Role Assignment------------------------------
Craig Syme
------------------------------